FreeBSD服務器在同一網絡上有防火牆後面的公網IP

Question

請幫忙！

ISP給我16個以太網連接16個公網IP。 如何管理把防火牆放在其他IP前面？

• 的IP是網關：100.100.100.161
• 因此，我們有：100.100.100.162到100.100.100.174使用
• 100.100.100.162，它是在防火牆的FreeBSD（RL0）
• RL1 FreeBSD的是本地網絡：192.168.0.2

 

    =================================== 
    [ISP] 
    100.100.100.161/255.255.255.240 
    =================================== 

    =================================== 
    [FIREWALL_FREEBSD] 
    rl0=100.100.100.162/255.255.255.240 
    rl1=192.168.0.2/255.255.255.0 
    gateway=100.100.100.161 
    =================================== 

    =================================== 
    [SERVER THAT SHOULD STAY BEHIND THE FIREWALL] 
    rl0=192.168.0.20/255.255.255.0 
    gateway=192.168.0.2 
    =================================== 

Answer 1

嗯，我解決了任務打破了16級的IP到2個街區，並要求ISP路由數據包的塞康d阻止我自己的防火牆。

因此，對塊1（ISP的同一淨）它位於我的防火牆

而且在塊2（從ISP的分段分開，只有通過我的防火牆可訪問），我可以把我的服務器。

ISP route: 100.100.100.168/29 ==> 100.100.100.169 
    [ISP list of my IP addresses] 
     100.100.100.160/255.255.255.248 = begin of block 1 
     100.100.100.161/255.255.255.248 = ISP gateway 
     100.100.100.162/255.255.255.248 = my firewall FreeBSD (rl0) 
     100.100.100.163/255.255.255.248 
     100.100.100.164/255.255.255.248 
     100.100.100.165/255.255.255.248 
     100.100.100.166/255.255.255.248 
     100.100.100.167/255.255.255.248 = end of block 1 
     ------------------------------- 
     100.100.100.168/255.255.255.248 = begin of block 2 
     100.100.100.169/255.255.255.248 = my firewall (rl2) 
     100.100.100.170/255.255.255.248 
     100.100.100.171/255.255.255.248 
     100.100.100.172/255.255.255.248 
     100.100.100.173/255.255.255.248 
     100.100.100.174/255.255.255.248 
     100.100.100.175/255.255.255.248 = end of block 2 


    [FIREWALL_FREEBSD] 
     rl0=100.100.100.162/255.255.255.248 (on same net of block1) 

     rl1=192.168.0.2/255.255.255.0 = (local network) 

     rl2=100.100.100.169/255.255.255.248 = (gateway for my servers) 

     rl2=100.100.100.170/255.255.255.248 = my server 1 
     rl2=100.100.100.171/255.255.255.248 = my server 2 
     rl2=100.100.100.172/255.255.255.248 = my server 3 
    ) 

    [SERVER BEHIND THE FIREWALL] 
     rl0=100.100.100.170/255.255.255.248 
     gateway=100.100.100.169 (my firewall)